Privacy Policy
Short version: Ordo does not require an account. Items you create are stored on your device. When you save a dump while online, its text is sent through our Cloudflare service to Anthropic for AI sorting. Anthropic's standard API retention is up to 30 days, subject to limited exceptions described below. If you previously joined the launch waitlist, Tally stores your email so we can manage the launch notice you requested. The app has no ads or behavioral analytics. Our website uses cookie-less, aggregate visitor counts.
1. Who we are
Ordo (the "App") is published by Samuel Laredo ("we", "us", "our"). You can reach us at support@heyordo.app.
2. What we collect
We collect the minimum needed to make Ordo work:
- Launch-list email. If you joined the waitlist on heyordo.app before Ordo became available, your email was collected and stored by Tally, our form provider, so we could send the Ordo launch notice you requested. Tally processes form data on our behalf under its privacy notice. We do not sell your email or use it for unrelated advertising.
- The text you capture. When you save a dump while online, its text is sent through our Cloudflare service to Anthropic to be sorted and refined (see Section 3). We do not store dump text in a database on any server we control. Your saved items live on your device.
- App preferences. Things like dark/light mode, your reminders, and whether you've completed the intro. Stored locally on your device only.
- Crash reports. If the app crashes or hits an error, a technical report may be sent to Sentry (Functional Software, Inc.), our crash-reporting service. Reports may include information such as device type, operating-system version, and error context. Sentry is configured not to send default personally identifiable information, and we do not intentionally attach the text of your dumps. Apple may additionally share its own crash reports with us if you have opted in on your device.
- Website visits (heyordo.app only, not the App). Our website uses Plausible Analytics, a privacy-first service that counts visits in aggregate — no cookies, no personal data, no advertising identifiers, no cross-site tracking. This runs only on the website; the App itself contains no analytics.
We do not collect:
- Your name, phone number, or an in-app account. Email was collected only from people who voluntarily joined the former website waitlist.
- Your location.
- Your contacts, photos, or other device data.
- Advertising identifiers or device fingerprints.
- In-app usage analytics or behavioral tracking of any kind.
3. AI processing — how the sorting works
When you save a dump while online, Ordo sends its text through a stateless service hosted on Cloudflare to Anthropic, PBC ("Anthropic"), the maker of the Claude AI model. Anthropic processes the text and returns a sorted version, which Ordo then displays and stores on your device.
What this means in practice:
- The text leaves your device to provide the AI-sorting feature.
- Our Cloudflare service passes the text to Anthropic and does not store it in a content database.
- Anthropic states that standard API inputs and outputs are deleted from its backend within 30 days, except where a different agreement applies or longer retention is required for usage-policy enforcement or by law. See Anthropic's retention information.
- Anthropic states that commercial API inputs and outputs are not used to train its models by default unless the customer explicitly opts in or submits feedback. See Anthropic's training information.
- We do not sell your dumps or use them for advertising.
4. Where your data lives
Everything you create in Ordo — your dumps, reminders, completed items, settings — is stored on your device using iOS's local storage. Nothing syncs to any cloud we control. If you delete the app, that data is gone from your device.
Waitlist emails are stored with Tally until we no longer need them for Ordo launch communications or you ask us to delete yours.
You can export a full backup of your data anytime from Settings → Data & Backup → Export. You can also restore a backup the same way.
5. Your rights and choices
- Remove your launch-list email. Email support@heyordo.app and ask us to delete your former waitlist submission.
- Delete your data. Delete individual items and empty Recently Deleted, or delete Ordo from your device to remove all locally stored app data. Export a backup first if you want to keep a copy.
- Export your data. Settings → Data & Backup → Export downloads everything as a JSON file you control.
- Reach us. Email support@heyordo.app with any questions about your data or this policy.
Depending on where you live, you may have additional rights concerning personal data, including rights to access, correct, or delete information. To make a request about information we control, including your former waitlist email, contact us using the address below.
6. Children
Ordo is not directed at children under 13, and we do not knowingly collect data from children under 13. If you believe a child has used Ordo, contact us and we'll help.
7. Changes to this policy
If we update this policy, we will post the revised version here and change the date at the top. Where required, we will provide additional notice through an available contact method.
8. Contact
Questions, feedback, or requests about privacy: support@heyordo.app.